High · 7.1 CVE-2024-30506 EUVD-2024-28426GHSA-4jhg-h526-7c6c

WordPress All In One Redirection plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Published Mar 29, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Vsourz Digital Product: All In One Redirection

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vsourz Digital All In One Redirection allows Stored XSS.This issue affects All In One Redirection: from n/a through 2.2.0.

Affected products

Vendor	Product	Affected	Fixed
Vsourz Digital	All In One Redirection	≤ 2.2.0	—

References

https://patchstack.com/database/vulnerability/all-in-one-redirection-404-pages-list/wordpress-all-in-one-redirection-plugin-2-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry